<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Hey Noggers! <div><br></div><div>With the DNSSEC roll date set to 5th of may (oh look, that's in three days!)<div><br></div><div><b>Are you ready?</b></div><div><br></div><div><b><span class="Apple-style-span" style="font-weight: normal;">I was a bit bored this morning and decided to pay a visit into some of my VM's with different providers and ran some DNS Resolver tests to see how everyone was **rigging** up with DNSSEC.</span></b></div><div><b><span class="Apple-style-span" style="font-weight: normal;">Some interesting results :D</span></b></div><div><br></div><div>Operating system of VM: <b>Centos</b> </div><div>Number of VM hosts: <b>15</b></div><div>Command used to test: <b>dig +short <a href="http://rs.dns-oarc.net">rs.dns-oarc.net</a> txt</b></div><div>Number of hosts who were DNSSEC ready: <b>4</b></div><div>Number of hosts who were NOT DNSSEC ready: <b>11</b></div><div><br></div><div>To test if your resolver is DNSSEC ready issues the following command: <b>dig +short <a href="http://rs.dns-oarc.net">rs.dns-oarc.net</a> txt</b></div><div><div><br class="webkit-block-placeholder"></div><div>Your results should be along these lines:</div><div><blockquote><pre>rst.x4001.rs.dns-oarc.net.
rst.x3985.x4001.rs.dns-oarc.net.
rst.x4023.x3985.x4001.rs.dns-oarc.net.
"192.168.1.1 sent EDNS buffer size 4096"
"192.168.1.1 DNS reply size limit is at least 4023 bytes"</pre></blockquote><div><br></div><div><h3>No EDNS</h3><p>The following result comes from a DSL router that does not support
EDNS:</p>
<blockquote>
<pre>rst.x486.rs.dns-oarc.net.
rst.x454.x486.rs.dns-oarc.net.
rst.x384.x454.x486.rs.dns-oarc.net.
"X.X.X.X DNS reply size limit is at least 486 bytes"
"X.X.X.X lacks EDNS, defaults to 512"
</pre></blockquote>
<h3></h3><div><h3>IP Fragments Filtered</h3><p>If you're behind a firewall that filters IP fragments, you can expect
to see a reply size limit slightly less than 1400 bytes:</p>
<blockquote>
<pre>rst.x1014.rs.dns-oarc.net.
rst.x1202.x1014.rs.dns-oarc.net.
rst.x1382.x1202.x1014.rs.dns-oarc.net.
"X.X.X.X sent EDNS buffer size 4096"
"X.X.X.X DNS reply size limit is at least 1382 bytes"
</pre></blockquote><div><br></div><div><br></div><div>I also tested this on a number of common modem brands including the new range of Netgear and DLINK, again a lot don't seem to be supporting DNSSEC.</div><div><br></div><div><br></div><div>So, what are we all doing about it? does everyone have a rollover plan?</div><div><br></div><div>Do tell :)</div></div></div><div><br></div><div><br></div><div><br></div></div><div apple-content-edited="true"><span class="Apple-style-span" style="color: rgb(21, 33, 246); font-size: 12px; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(5, 97, 0); font-family: Helvetica; font-size: 9px; font-style: italic; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(5, 97, 0); font-family: Helvetica; font-size: 9px; font-style: italic; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div><b>Cheers!<br class="Apple-interchange-newline">Karl Kloppenborg</b></div><div>Technical Director @ Karltec</div><div><font class="Apple-style-span" color="#056100" size="1"><i><span class="Apple-style-span" style="color: rgb(0, 0, 0); font-size: 12px; font-style: normal; "></span><br class="Apple-interchange-newline"><span class="Apple-style-span" style="border-collapse: separate; color: rgb(5, 97, 0); font-family: Helvetica; font-size: 9px; font-style: italic; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div><font class="Apple-style-span" color="#056100" size="1"><i><span class="Apple-style-span" style="color: rgb(0, 0, 0); font-size: 12px; font-style: normal; "><div><font class="Apple-style-span" color="#056100" size="1"><i><span class="Apple-style-span" style="color: rgb(0, 0, 0); font-size: 12px; font-style: normal; "><div><font class="Apple-style-span" color="#1521F6"><br class="Apple-interchange-newline"><span></span><span></span><span></span><span><img height="95" width="289" id="d9508c99-1996-4321-9e40-c7d774dfa01a" apple-width="yes" apple-height="yes" src="cid:15FE21BE-D31A-46AD-81DA-592EAB115170@karltec.net"></span><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><span class="Apple-style-span" style="color: rgb(5, 97, 0); font-size: 9px; font-style: italic; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(5, 97, 0); font-family: Helvetica; font-size: 9px; font-style: italic; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div><font class="Apple-style-span" color="#056100" size="1"><i><span class="Apple-style-span" style="color: rgb(0, 0, 0); font-size: 12px; font-style: normal; "><div><font class="Apple-style-span" color="#056100" size="1"><i><span class="Apple-style-span" style="color: rgb(0, 0, 0); font-size: 12px; font-style: normal; "><div><font class="Apple-style-span" color="#1521F6"><br class="Apple-interchange-newline"><br class="Apple-interchange-newline"><br class="Apple-interchange-newline"><br class="Apple-interchange-newline"><br class="Apple-interchange-newline"></font><b><span class="Apple-style-span" style="font-family: Verdana; font-weight: normal; "><span class="Apple-style-span" style="font-family: Helvetica; "><font class="Apple-style-span" color="#1521F6">P</font> 02 8014 4253<b><span class="Apple-style-span" style="font-family: Verdana; font-weight: normal; "> EXT:104</span></b></span> <span class="Apple-style-span" style="font-family: Helvetica; font-weight: bold; "> | <font class="Apple-style-span" color="#1521F6"><span class="Apple-style-span" style="font-weight: normal; ">M </span></font><span class="Apple-style-span" style="font-weight: normal; "><b><span class="Apple-style-span" style="color: rgb(21, 33, 246); font-weight: normal; "><span class="Apple-style-span" style="color: rgb(0, 0, 0); "><b><span class="Apple-style-span" style="font-weight: normal; ">0438475892 <b>|</b> <font class="Apple-style-span" color="#1521F6">www</font>.karltec.net</span></b></span></span></b></span></span></span></b></div></span><br class="webkit-block-placeholder"></i></font></div><div><span class="Apple-style-span" style="color: rgb(5, 97, 0); font-size: 9px; font-style: italic; ">Please consider the environment before printing this email. Think before you print. </span></div><div><font class="Apple-style-span" color="#056100" size="1"><i><br class="webkit-block-placeholder"></i></font></div></span></i></font></div><font class="Apple-style-span" color="#056100" size="1"></font><font class="Apple-style-span" color="#056100" size="1"></font></span><br class="Apple-interchange-newline"></span><br class="Apple-interchange-newline"></span></span>
</font></div><font class="Apple-style-span" color="#1521F6">
</font></span></i></font></div></span></i></font></div></span></span></i></font></div></span></span></span></span></div><br></div></div></body></html>